Can I encrypt an AFP connection

Hi,
I've got an OSX server configured as a webserver and are using webdav with a SSL cert to allow customers to send and receive files. The only problem with this is that I can't enforce change of password.
Was wondering if we changed it to an afp connection would I still get any sort of encryption (needs to be 128bt). Also I guess I could then enforce password rules.
Thanks
Craig

Dear user495600,
Please read the following articles;
http://it.toolbox.com/wiki/index.php/How_to_encrypt_indexed_columns_in_Oracle
http://www.oracle.com/technology/deploy/security/database-security/transparent-data-encryption/tde_faq.html#A12007
From the Oracle documentation;
Transparent Data Encryption
   1. Will encrypted data be decrypted for all users who have been authorized to see it?
   2. What is the overhead associated with TDE?
   3. What are the encryption algorithms that can be used with TDE?
   4. Is it possible to use 3rd party encryptions algorithms in place of the ones provided by TDE?
   5. Can I use TDE column encryption on columns used in foreign key constraints?
   6. Can columns that are used for joins be encrypted?
   7. Can indexed columns be encrypted?
   8. What data types and data lengths does TDE column encryption support?
   9. Does the data stay encrypted on the network?
10. Does the database memory (SGA) contain clear-text or encrypted data?
11. How do I know which data to encrypt?
12. Where is the data that needs to be encrypted?
13. With Oracle Database 11gR1, shall I use TDE column encryption or TDE tablespace encryption?
14. How is TDE different from the encryption toolkit Oracle already provides?
15. How is TDE licensed?
Number 7:
# Can indexed columns be encrypted?
TDE tablespace encryption supports all indexes transparently.
For TDE column encryption, the index needs to be a normal B-tree index, used for equality searches. In case of a composite, function-based index, the encrypted column cannot be the one that was used for the function. When encrypting a column with an existing index, it is recommended to first extract the index definition with dbms_metadata.get_ddl, then drop the index, encrypt the column with the 'no salt' option, and re-build the index.http://www.oracle.com/technology/obe/11gr1_db/security/tde/tde.htm
Hope That Helps.
Ogan

Similar Messages

My PC can connect to the airport extreme but with encryption it cannot connect to the internet my iMac has no issues, any help.

My PC can connect to the new airport extreme I just purchased but with encryption it cannot connect to the internet my iMac has no issues. If I open the airport exteme up and provide no security everything is fine which leads me to believe it is something with the encryption between the two devices. Not sure what step I'm missing here this shouldn't be this difficult.

Sorry, I should have been more clear. I am asking if the DNS IP addresses, not the IP addresses assigned by the DHCP service, are the same. DNS is like the Internet's version of the Yellow Pages. Your ISP typically will provide them to you or you can elect to use those provided by another source, like OpenDNS.
DNS is the service that translates a website's URL to its actual IP address so that you can access it. I am just trying to rule out that the PC is not configured properly with the correct DNS IP information.
The other thing to check is if the PC is configured to use a Proxy service. By default, it would not be.
Finally, what is the make & model of the PC. More importantly, if the PC is using either a PCI or USB wireless adapter, what is its make & model?

LogMeIn Hamachi: AFP Connection Error

Hi Community,
I'm currently trying to set up an AFP connection between two computers that are both connected to my Hamachi Server. I have three computers on the free server, the two I need to connect, and the third being my personal computer. Whenever I try to connect the two computers (either way, from computer A to computer B or vice versa), I get the error:
"The server "x.xx.xxx.xx" may not exist or is unavailable at this time. Check the server name or IP address, then check your network connection, then try again."
Both computers are returning a ping regularly, so I'm not sure why this is happening. Furthermore, both computers can connect to my personal computer via AFP, but my personal computer can not connect to either of these computers. All three computers are on different networks, so I'm suspecting a network-side firewall issue, but after going about opening ports on the 2wire and Netopia 3000 (the two routers I'm dealing with), I'm still getting the same error. Does anyone know where this error is originating from? Or even better yet how I can fix it? Thank you so much,
~Josh

Hamachi provides a VPN connections between the system, which unless the firewall (and or router) is actually blocking Hamachi, will NEVER see your AFP traffic and ports on the Hamachi network, except as encrypted packets using the Hamachi port(s).
Hamachi tends to use a 5.x.x.x based IP address. Have you tried finding the Hamachi assigned IP address for the remote servers and connecting using that?
Finder -> Go -> Connect to server -> afp://5.x.x.x
I think Hamachi will distribute Bonjour messages, so in theory you should be able to use a utility such as Bonjour Browser to see if the remote Hamachi system's Bonjour services are visible.

MDNSResponder error: no afp connections from OS X client

Hi,
I have a 10.4.10 client that cannot print or use afp connections. When trying to print I´ll get "Print error"-message, and when trying to connect to afp server system just waits and waits.
System.log gives an error:
"mDNSResponder: 16: FoundInstance: ftp.tcp.local. PTR . received from network is not valid DNS-SD service pointer"
Any idea where the problem might be?
I have tried cache cleaning, log cleaning, repairing permissions, and so on.

This is also being disucssed somewhere else https://discussions.apple.com/thread/5486117. I have the same problem, sorry i can't help.

AW Dependent upon AFP connection and will not open files

Over the holiday break I brought an old G4 home so the kids could play. I linked it to a local network with a router. Pretty simple.
Now that the old machine is back working away at the office, the G5 at home will not open any AW files. It will spin the colored beach ball and finally a dialogue box will appear with the AFP connection status and it has a statement which says Looking up "G4." Another box will then appear stating a connection could not be made.
All of a sudden there seems to be this dependence upon the old G4 as a server.
How can I get AW to work again?

If you had asked before you did this I would have told you not to move to Mavericks unless you were prepared for problems. I’m not a proponent of upgrade installations for operating systems and there’s no way to eliminate that as the cause.
That said, before you start erasing the whole machine, try uninstalling CS6 and then reinstalling it. You might want to run the cleaner tool after the uninstallation.
http://helpx.adobe.com/creative-suite/kb/cs5-cleaner-tool-installation-problems.html

10.7.5 Lion Server limiting AFP connections to 10

I have an Intel XServe, Late 2006 2 x 2 GHZ Dual-Core Xeon with 20GB DDR2-DIMM RAM running Mac OS X Server Lion 10.7.5 (11G63) that has started to limit AFP connections to 10. This is a problems as we use this server to host Network Home Directories for 1/3 of our students (approximately 100 student directories are hosted on this server via a fiber channel XServe RAID).
I know that OS X Server can handle thousands of simultaneous AFP connections...I'm using two other 10.7.5 XServes to host the other 200 student accounts (1 XServe is an Early 2008 2 x 2.8 Quad Core Xeon with 24 gb of RAM running the same OS Build and the other is an early 2009 2 x 2.26 Quad Core with 24 GB of RAM running the same OS X Server build). Both of those XServes currently have between 40-80 AFP connections. Before last week, the oldes XServe was functioning normally, allowing 20-60 connections. For some reason last week, AFP crashed on this system and when I rebooted the server it now refuses to allow more than 10 AFP connections (confirmed by an error message from clients attempting to connect). I know that this behavior is more indicative of OS X client which only allows 10 simultaneous connections. The only messages in the AFP error logs are:
AppleFileServer[172] <Info>: TCP Listener returned error on accept
repeated over and over again.
Anybody have any thoughts on why this might be happening? After everybody leaves today I'm thinking of disconnecting the RAID from this Server and then attaching it to one of the other two XServes and then re-mapping the the student accounts to the other servers, but I'd hate to decrease my load-balancing as this is already a fairly slow solution as it is.
Thanks,
Christopher

I've done some more digging and it looks like the three packages included in the update have about 4000 files that didn't get installed. A good number of them are .png or .icns files, but there are whole applications (e.g. VNCServer) that didn't get updated.
The system is currently in a state where it cannot install software via Software Update or via Installer.
Any ideas?

AFP Connection Status box shows each time I launch Photoshop

I am on a 2-computer network and whether I am off the network or on, each time I launch PhotoshopCS the AFP Connection Status box pops up with the message: Looking up "[name's] computer" (the other computer on the network). Why is this appearing and how do I get rid of it? It's the only application this happens in. I'm on a PowerBook G4; the other computer is a G5 tower. Both run OSX 10.4.xx. (When this happens I press Cancel in the dialog box and Photoshop continues to launch.)

BDAqua, Thanks for trying to help; you're the only person who responded. I have read the two threads you sent, but I'm not seeing the similarities between these issues and mine. I don't think I changed a user short name; I went to the Users folder as suggested in one of the posts and there are three users: me, the other person who's computer I connect to sometimes, and a shared folder. The other thread looks like it has to do with someone who's ON a network and can't see the other computers. That's not my problem.
Any other suggestions? It only happens when I launch Photoshop, and naturally I have saved something from the other computer to mine in that program, but in lots of others too.

Can't make Secure AFP work between 10.3.9 Server and 10.4.6 client

Ultimately, I want to be able to access our Xserve from the Internet, through the firewall, securely. But for now, I'm just trying to get the AFP Server on Server 10.3.9 to accept Secure AFP connections (from 10.4.6 clients). In short, it's not working.
I've checked the Enable Secure Connections under the AFP > Settings > Access panel in Server Admin. When I choose Go > Connect to Server from my G5 (10.4.6), and select Allow Secure Connections, and choose Connect... I'm told that "The Server does not allow secure connections" (or something like this) "would you like to connect with reduced security?" I click OK, and it connects, albeit without SSH.
Any ideas what I can try to fix this? (These two computers, by the way, are on the same local network. First thing's first.)
Thanks.
...Rene
Xserve G5 Dual 2GHz Mac OS X (10.3.9) Mac OS X Server 10.3.9
Xserve G5

Try restarting the AFP Server. Sometimes it takes a couple of times for the setting to take.
Can you ssh into that server from the client as that user?
You may be better served in the long run by using a VPN instead.
- Leland

Work Folders on Windows 7 - Error Sync Stopped Can't Encrypt Files

Hello All-
We are getting ready to roll out Work Folders. It is working all fine on Windows 8.1 devices and am not trying to get it to work on Windows 7 SP1 devices. The Work Folders client for Win7 installs fine and I can configure it, however,
immediately after configuring work folders it displays an error stating that "Sync Stopped. Can't Encrypt Files." There is really no other information that I can find on this error.
Any help would be appreciated!!
Thanks

Digging around a bit more, I found some error msgs in Work Folders Event log:
Event ID 2100
Sync failed. Work Folders path: C:\Users\testuser\Work Folders; Error: (0x80c80314) The Work Folders path has to be encrypted. You might have an application holding the Work Folders folder open or the folder might be compressed. Close Windows Explorer and
any open files or apps, and check the folder Advanced properties to ensure that the folder is not compressed.
and
Event ID 9002
Work Folders detected a sync error. Check partnership status, network connectivity, and disk space.
Again, these errors only occur on Windows 7 SP1 Professional | Enterprise devices. Windows 8.1 devices function as desired.

Can an original Airport card connect to an Airport Extreme base station

I have an old iBook G3 10.3.9 with an original Airport card (System Profile says "Wireless Card Firmware Version: 8.70"). This computer/airport card connects fine with an old Airport Graphite.
But it will not connect with my main Airport Extreme 802.11n (1st Generation), running in 802.11n (802.11b/g compatible) mode. This Airport is using WPA/WPA2 Personal wireless security. This Airport Extreme works fine with my other computers and devices.
Does anybody know, offhand, whether it is just a setting, or is this completely unworkable?
Thanks in advance for any input.

I cannot remember all the details regarding the older iBooks, but suspect that the wireless card and possibly the operating system that you are using on the iBook cannot support WPA/WPA2 wireless encryption.
As a test....
Temporarily turn off the wireless security on the 1st Gen AirPort Extreme, then see if the iBook can connect to the wireless network that way.
If it can, this tells you that the wireless is at least working on the iBook....but it cannot connect to the WPA/WPA2 network.
The solution might be to use a USB wireless adapter that can handle the higher encryption levels, or connect the iBook using Ethernet.
If the iBook still cannot connect when security is disabled during the test, then the iBook has additional issues that you may or may not wish to pursue.

Disconnect idle AFP connections in ML?

Back in Snow Leopard there was an option in Server Admin to set a time limit for idle AFP connections, automatically disconnecting users who are idle for a time period that I set. This option is no longer available in Mountain Lion, as far as I can see anyways. Does anyone know if it is still possible to se this. Perhaps via terminal?

You should be able to set the following keys to enable this feature. I will admit that I've not tried this but in theory this should work.
sudo serveradmin settings afp:idleDisconnectOnOff = yes
sudo serveradmin settings afp:idleDisconnectTime = 40
The number is the number of minutes (40 in the above example). There are also the individual flags for the user types. They are:
afp:idleDisconnectFlag:guestUsers = yes
afp:idleDisconnectFlag:usersWithOpenFiles = yes
afp:idleDisconnectFlag:registeredUsers = yes
afp:idleDisconnectFlag:adminUsers = yes
You can set them with prefixing sudo serveradmin settings to the beginning of each line.
I would clearly suggest testing this with a relatively short time and if it works, reset to a time that you prefer.
R-
Apple Consultants Network
Apple Professional Services
Author "Mavericks Server – Foundation Services" :: Exclusively available in Apple's iBooks Store

AFP connections dropping on 10.8.5 Server

We are experiencing a very odd problem when AFP connections to our server are dropping part way through, which often then makes the client machine crash and force a hard reboot.
AFP logs on the server show nothing, but the /var/log/system.log events below show the disconnection as it happens.
Note I have installed the 10.8.5 Combo Updater, reinstalled the Server.app from the AppStore, experienced the same on various client machines, and seen the same problem.
We have plenty of disk space on both sides and the folder in question are about 40GB.
Disk Warrior on both ends has been used already, nothing interesting found.
Oddly enough connecting via SMB does not cause these problems.
Originally I thought it might be network related, but I tried connecting an Ethernet cable directly between client and server (bypassing the switch) and saw the same problem.
I can only surmise a recent OSX update (not sure if this problem is on the server end or client end) caused this problem.
Here are the log details:
Oct 7 18:28:14 frankie.example.com KernelEventAgent[46]: tid 00000000 received event(s) VQ_NOTRESP (1)
Oct 7 18:28:14 frankie.example.com KernelEventAgent[46]: tid 00000000 type 'afpfs', mounted on '/Volumes/INCOMING', from '//[email protected]/INCOMING', not responding
Oct 7 18:28:14 frankie kernel[0]: ASP_TCP Disconnect: triggering reconnect by bumping reconnTrigger from curr value 0 on so 0xffffff801e112ef0
Oct 7 18:28:14 frankie kernel[0]: AFP_VFS afpfs_DoReconnect started /Volumes/INCOMING prevTrigger 0 currTrigger 1
Oct 7 18:28:14 frankie kernel[0]: AFP_VFS afpfs_DoReconnect: doing reconnect on /Volumes/INCOMING
Oct 7 18:28:14 frankie kernel[0]: AFP_VFS afpfs_DoReconnect: posting to KEA EINPROGRESS for /Volumes/INCOMING
Oct 7 18:28:14 frankie kernel[0]: AFP_VFS afpfs_DoReconnect: Max reconnect time: 30 secs, Connect timeout: 15 secs for /Volumes/INCOMING
Oct 7 18:28:14 frankie kernel[0]: AFP_VFS afpfs_DoReconnect: connect to the server /Volumes/INCOMING
Oct 7 18:28:14 frankie kernel[0]: AFP_VFS afpfs_DoReconnect: Logging in with uam 10 /Volumes/INCOMING
Oct 7 18:28:14 frankie.example.com KernelEventAgent[46]: tid 00000000 found 1 filesystem(s) with problem(s)
Oct 7 18:28:14 frankie kernel[0]: AFP_VFS afpfs_DoReconnect: Restoring session /Volumes/INCOMING
Any ideas, suggestions appreciated!

Please take each of the following steps until the problem is resolved. Back up all data before making any changes.
Step 1
Delete all sharepoints in the File Sharing tab of the Sharing preference pane. Recreate them one at a time and test each one.
Step 2
Boot into Recovery mode, launch Disk Utility, select the startup volume, and run Repair Disk (not Repair Permissions.) If any problems are found, repeat. Then reboot as usual.
If any sharepoints are on a different volume, repair it too.
Step 3
Boot the server in safe mode and test. Note: If FileVault is enabled on some models, or if a firmware password is set, or if the boot volume is a software RAID, you can’t do this. After testing, reboot as usual and verify that you still have the problem.
Step 4
Triple-click anywhere in the line below on this page to select it:
/Library/Preferences/com.apple.ByteRangeLocking.plist
Right-click or control-click the line and select
Services ▹ Reveal
from the contextual menu.* A folder should open with an item selected. Move the selected item to the Trash. Repeat with this line:
/var/db/BRLM.db
Reboot.
*If you don't see the contextual menu item, copy the selected text to the Clipboard (command-C). In the Finder, select
Go ▹ Go to Folder...
from the menu bar, paste into the box that opens (command-V). You won't see what you pasted because a line break is included. Press return.
Step 5
Reinstall the OS. You don't need to erase the startup volume, and you won't need your backup unless something goes wrong. If your Mac was upgraded from an older version of OS X, you’ll need the Apple ID and password you used to upgrade.
If you installed the Java runtime distributed by Apple and still need it, you'll have to reinstall it.

Server Admin [disabled/asleep] afp connections

1 OD Master, 10 Replicas
On all the servers (except 1 replica which is connected via a T1 line) I get many AFP connections that have a status of Disabled/Asleep
When I Disconnect these, the server behaves better.
My question: Why is this happening? How can I have the server disconnect these on its own?

Seems that I need to wait for OS X Server 10.5

Encryption trace when connecting from JDBC

Hello,
Please can any one let me know that, How can I trace the JDBC connection using encryption comeing from client to database
I have enabled ASO, on both Server & Client, I can trace net8 connection for example connecting from sqlplus, and I can make sure that from the trace sqlplus connections are encrypted, but for JDBC connection do we have anything like above so that I can trace and say that all connections are encrypted. If anybody can throw light on this.
THANKS IN ADVANCE.
Regards,
Swamy.

hi
are u not able to enable tracing programatically.
if so
i think i now have an idea of using jdbc with aso.
the following params need to be set in sqlnet.ora to enable tracing, when u configure server and client for ASO using Net8.
TRACE_LEVEL_SERVER
TRACE_DIRECTORY_SERVER
similarly u need to set these params programatticallym using properties collection in jdbc.
check the sample below. u can use this as a sample to set the above params.
DriverManager.registerDriver(new oracle.jdbc.driver.OracleDriver());
Properties props = new Properties();
try {
int level = AnoServices.REQUIRED;
props.put("user","...");
props.put("password","XXXXXXX");
props.put("oracle.net.encryption_client",
Service.getLevelString(level));
props.put("oracle.net.encryption_types_client", "DES56C");
props.put("oracle.net.crypto_checksum_client",
Service.getLevelString(level));
props.put("oracle.net.crypto_checksum_types_client", "MD5");
} catch (Exception e) { e.printStackTrace(); }
// You can put a database name after the @ sign in the connection URL.
Connection conn = DriverManager.getConnection
("jdbc:oracle:thin:@localhost:1521:database_name", props);

Max Simultaneous AFP Connections

Hello,
This problem may be answered already, but I couldn't find it through a search.
Current Setup:
Xserve (slot-load) Dual 1.33Ghz G4 (2MB L3 cache per processor)
1.5GB RAM
Mac OS X Server 10.3.9
connected to Xserve RAID with about 3.5TB of space.
3700 User Accounts (School District)
Running only AFP and Open Directory services. Strictly used for file sharing.
Problem:
We are having a problem with the AFP connections being very slow (on the client side). Often you will have to wait 30 minutes for the AFP connection to get past authenticating. The problem is a little random, but we think it is narrowed down to when there are around 150 - 200 simultaneous users.
From what I have read 100 - 150 simultaneous users is about the reasonable limit for Mac OS X Server. During this time the console is also slower then normal. We have increased the threads for the AppleFileService process to 400.
Here's the question: is that limit due to Mac OS X server, or it is because of hardware. So, if I order a brand new Intel Xserve (whenever they ship) would that increase my limit, or would be the same due to the server software?
We are upgrading the RAM to 2GB tonight, but I doubt that will fix the problem. Is there anything else we can try? Would upgrading to 10.4 server help?
Thanks in advance for your time and responses
Xserve (Slot-Load) Mac OS X (10.3.9) Dual 1.33, 1.5GB

Just to add another user into the fire, i have the same issues, but......
We have 25 Users, all are running 10.4, and all now have Appletalk turned off, even thought they were only using it for printing.
IP has always been used to connect to the server, and there were no issues. We've recently upgraded the server to 10.4, and applied the full 10.4.8 update, and we are getting really, really slow response times opening files.
At the same time the Network department decided to change from a singular VLAN to multi Vlans. Were pretty sure its a network issue, as the xserve is sitting there doing nothing too taxing.
We've recently forced 100, on both the Macs, and the switched, which are cisco, that also have spanning tree and all oter rubbish turned off.
Once thing that i have seen on our server is multiply 'Open Fork' messages for the same file that is being opened by each user in the AFP logging.
I'm running some tests on our own server, which hasn't got the same loading, but i'm looking at the logs today.
I know this doesn't help you directly, but are you at the same stage as i am, in regards network/VLans, etc, etc??.

Can I encrypt an AFP connection

Similar Messages

Maybe you are looking for